Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:email_gateway:7.6:*:*:*:*:*:*:*

part: a version: 7.6 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEmail Gateway (41475657-86b9-5a2d-b017-a2029b627649)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3969 vulnerable 2026-06-03 14:35:46.907020 Details available
Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email.
Published: 2016-04-06T18:00:00.000Z
Updated: 2024-08-06T00:10:31.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1619 vulnerable 2026-06-03 14:34:39.791909 Details available
Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages.
Published: 2015-02-17T15:00:00.000Z
Updated: 2024-09-16T23:46:13.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7104 vulnerable 2026-06-03 14:33:33.985337 Details available
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.
Published: 2013-12-14T17:00:00.000Z
Updated: 2024-08-06T17:53:46.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7103 vulnerable 2026-06-03 14:33:33.985022 Details available
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.
Published: 2013-12-14T17:00:00.000Z
Updated: 2024-08-06T17:53:46.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7092 vulnerable 2026-06-03 14:33:33.929871 Details available
Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) event_id, (3) reason, (4) events_order, (5) emailstatus_order, or (6) emailstatus_col JSON keys.
Published: 2013-12-13T18:00:00.000Z
Updated: 2024-08-06T17:53:45.871Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.